[Diablo 3][[0.8.0.8815] Patch 14 - Info Dump Thread

[Valtharak]

well the player acd stay in the same position . i think it only change if you change world.

[Nesox]

I just use the ACDGuid in RActor to find the right ACD

[BitHacker]

Nesox,

Have you tried eEye Binary Diffing Suite (EBDS) to Diff... the patch files? It looks nicer than BinDiff 4.0.1 with IDA. BinDiff 4.0.1 is nice to change function names from sub_02u743u84902i8 to memcpy() in the IDA pro output files.

You can import all dll functions into the diablo3.exe with BinDiff ida plugin. I'm sure you already know that though.

This technique is talked about in malware analyst's cookbook. Highly recommend you read it. Chapter 12 goes over bindiff plugin.

-Bit_Hacker

[Nesox]

Nesox,

Have you tried eEye Binary Diffing Suite (EBDS) to Diff... the patch files? It looks nicer than BinDiff 4.0.1 with IDA. BinDiff 4.0.1 is nice to change function names from sub_02u743u84902i8 to memcpy() in the IDA pro output files.

You can import all dll functions into the diablo3.exe with BinDiff ida plugin. I'm sure you already know that though.

This technique is talked about in malware analyst's cookbook. Highly recommend you read it. Chapter 12 goes over bindiff plugin.

-Bit_Hacker

I have tried almost every bindiff plugin tool there is, my absolute favourite is zynamics bindiff, it's great you should buy it.
You still need to know what entrypoint the dll has in the binary if ure gonna do that, IDA has an option that let's you load additional binaries into the db.